AWS Redshift Terraform module
Upstream version 7.1.1
11 controls from PCI DSS v4.0 requirements
Terraform Module Source
pcidss.compliance.tf/terraform-aws-modules/redshift/awsCloudWatch log groups should have retention period of at least 365 days
cloudwatch_log_group_retention_period_3653.2.1
Framework requirement
Log groups should have encryption at rest enabled
log_group_encryption_at_rest_enabled3.5.1
Framework requirement
Redshift clusters should have audit logging enabled
redshift_cluster_audit_logging_enabled5.3.4
Framework requirement
Redshift clusters should have automatic snapshots enabled
redshift_cluster_automatic_snapshots_min_7_days10.3.3
Framework requirement
Redshift clusters should have automatic upgrades to major versions enabled
redshift_cluster_automatic_upgrade_major_versions_enabled6.3.3
Framework requirement
Redshift cluster encryption in transit should be enabled
redshift_cluster_encryption_in_transit_enabled1.2.5
Framework requirement
Redshift clusters should have enhanced VPC routing enabled
redshift_cluster_enhanced_vpc_routing_enabled1.3.1
Framework requirement
Redshift clusters should have KMS encryption enabled
redshift_cluster_kms_enabled3.5.1
Framework requirement
Redshift clusters should have Multi-AZ deployments enabled
redshift_cluster_multiple_az_enabled3.5.1
Framework requirement
Redshift clusters should prohibit public access
redshift_cluster_prohibit_public_access1.2.8
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports1.3.2
Framework requirement